Omg! I think I have a trojan horse in my computer!!! o.O Please, when I try to delete it, it says the file is running. And I can't delete it! I restarted the computer and it says it's STILL running! How can I get rid of it?? Please help!!! *cry*

12-20-2002

vasanth

Well there qwill be an entry in the registry under thr run or run once key delete it.. restart then delete it.. If still not possible start computer in DOS mode and delete the file manually.. This is a fool proof way of removing it...

12-20-2002

*Michelle*

I"m sorry, but I don't quite understand what to do, I pm you, please help me :(

12-20-2002

OneStiffRod

Press CTRL - ALT - Delete and check to see the 'processes' running. If you see the program or something suspicious press the 'End Task' button. Then you should be able to delete it, if that don't work you have to do something a little more complicated.

12-20-2002

*Michelle*

onestiffrod, I tried that and it doesn't work, I ended half the programs that are in the endtask window! lol...

12-20-2002

OneStiffRod

Then grasshopper, we must restart the PC in SAFE mode to delete the trojan.

goto START menu ->Run... command -> type 'msconfig'

select the startup tab and select 'diagnostic' or 'safe' startup then restart pc

now you can delete the program

Run msconfig again
and reset it to selective startup

12-20-2002

*ClownPimp*

It could just be an advertising bug that could infect you when you install freeware programs. Go to lavasoft.nu and download ad-aware. That might solve your problem

12-20-2002

*Michelle*

Thank you stiff!! :D I'll go try that now. And clown, I downloaded that program, so it isn't ad stuff. And one more question, do you think deleting the file will get rid of the trojan? Ok, I got this file called nerkey and then I opened it nothing happened, but the computer starting to whirr really loudly as if it's processing something. I thought nothing of it until this antivirus program tells me there is a trojan.CDance.A thing in the file, I tried to delete nerkey it says the source file may be opened, so I restart the comp and try delteing it again, doesn't work, same message. So if I delete nerkey do you think it'll be gone? o.O

12-20-2002

OneStiffRod

Yes probably, if that's the program that looks suspicious. In 'msconfig' in the startup tab it allows you to check and uncheck names of programs that launch on startup, the trojan is running at startup so check to see if Nerkey is listed there or anything else suspicious and uncheck them.

When you restart they won't run and you can delete them w/o problems.

12-20-2002

*Michelle*

Yes yes!!!! I find it! The name is Microsoft Tray and it loads from the nerkey file! So if I uncheck it (I already deleted nerkey from my computer using safe mode) do I still have to get rid of Microsoft Tray? I don't know what that is tho...

The TRAY is the area bottom right next to the clock, all those little icons- when you run Kazaa that's where it goes when you shut it off. I think that Nerkey minimized itself to run in the TRAY - you can uncheck it as long as it was luanched FROM nerkey - don't shut off the TRAY itself that might cuase a crash.

12-20-2002

face_master

1 Attachment(s)

hehe just wanted to point this out...

12-20-2002

*Michelle*

Don't scare me, I'd like to think I'm safe... *sobs* Anyway, I think I'm ok tho, just gotta restart the comp to get rid of the startup thing, :) Thank you SOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO much Stiff!! You're my god! :D Really, I mean I was scared stiff when I found out I have a trojan in my comp and I can't delete it... You see, I have already killed my comp twice and manage to save it, but the USB and floppy doesn't work anymore... And CD burner too... I don't want to lose the entire thing this time! O.O And it's scary cause ppl can use trojans to delete your files right? That's scary...

@stiff, how did you know I got nerkey from Kazaa??? o.O And I've got another thing that says System Tray, I think you mean that...